Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a0377523-9350-3700-bb53-52d08459144f.roa
File:                     a0377523-9350-3700-bb53-52d08459144f.roa (raw, json)
Hash identifier:          Czh7+DYHBMfUQwzDmyOsl1FL+obSy1lL/3qy8PGgCgA=
Subject key identifier:   71:B6:03:86:45:0D:D5:B1:87:2A:B3:C8:7F:50:C1:4E:84:A3:8A:7E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E888F317D9E264D49DC0F2300
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a0377523-9350-3700-bb53-52d08459144f.roa
Signing time:             Sat 09 Jul 2022 12:00:00 +0000
ROA not before:           Sat 09 Jul 2022 12:00:00 +0000
ROA not after:            Tue 12 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:88:8f:31:7d:9e:26:4d:49:dc:0f:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul  9 12:00:00 2022 GMT
            Not After : Jul 12 04:00:00 2022 GMT
        Subject: CN=272851d3-8f5a-4e86-991f-0736a019f7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:e8:27:88:82:4e:83:1d:26:7e:b5:bf:22:
                    0a:90:0e:2f:ba:2c:9d:8c:21:41:25:78:6a:cf:2e:
                    32:5e:00:a8:ff:9c:4d:75:e3:ed:bb:e6:db:ae:55:
                    00:20:dd:63:8c:a6:e7:b2:20:eb:ae:1c:72:d5:fe:
                    3e:1a:c8:dd:f8:c6:b8:93:00:b2:79:8a:dc:37:8b:
                    6f:f5:5d:55:99:16:69:d9:0b:71:ee:51:e9:15:64:
                    d8:bb:fd:ac:03:c7:22:d8:a0:56:5b:16:11:49:a8:
                    d1:05:f0:d5:70:71:2b:ce:ee:d9:eb:79:eb:60:6a:
                    a3:c9:2c:eb:3b:d6:93:04:15:9a:08:2c:0c:70:1d:
                    6d:85:59:0d:83:01:04:07:97:0f:6d:fe:03:c2:74:
                    33:11:61:36:e8:d3:2e:ee:28:6e:09:25:c9:1f:ef:
                    8d:1e:4c:a7:42:08:db:59:d9:74:34:2e:60:b7:d8:
                    31:36:cb:31:af:5c:ff:cd:2e:61:ef:78:dc:b2:03:
                    31:59:1f:9e:26:54:16:cb:06:be:8d:df:1b:df:2d:
                    1a:56:26:55:5f:fe:d9:71:a4:68:5e:24:21:f2:71:
                    74:71:4a:e8:6a:35:b1:1b:74:bd:17:52:25:7d:1e:
                    f0:7f:a9:d6:73:44:7f:1b:ac:c7:6f:27:82:3e:46:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B6:03:86:45:0D:D5:B1:87:2A:B3:C8:7F:50:C1:4E:84:A3:8A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a0377523-9350-3700-bb53-52d08459144f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:7d:9d:45:e8:78:0e:1a:54:f2:53:7e:26:53:39:55:e7:
         dd:52:ee:78:82:64:db:3d:21:41:47:b0:58:c9:9b:cc:c8:4c:
         38:c6:41:6a:cf:dd:dd:83:e8:9c:69:1f:69:c6:5f:2a:6f:b4:
         95:03:20:ad:1b:84:90:98:c3:87:90:9f:aa:83:71:b7:73:48:
         81:16:88:45:7c:c4:50:16:78:69:fe:c9:6c:7e:3a:3b:4a:3d:
         9b:f1:b4:cb:86:79:99:c0:ad:4c:a0:3d:b6:eb:aa:62:95:29:
         00:a3:b2:f8:bc:9c:42:9d:e3:12:03:1d:3c:f5:9b:cf:70:61:
         2d:ad:02:14:34:46:0a:bc:37:a5:8a:9b:d4:66:4c:55:0e:eb:
         04:c5:2b:8b:84:32:ff:b4:19:34:f0:75:98:53:05:36:7c:8d:
         f2:a0:54:e8:5f:dd:d1:99:69:d5:96:76:27:a5:0a:17:ca:8f:
         ec:83:58:59:62:15:0c:38:7f:a5:a7:d4:90:25:58:ba:76:51:
         51:ac:10:ca:d1:8b:d2:31:8c:a7:81:dd:71:56:b1:88:18:15:
         81:8f:17:93:44:78:28:62:ad:63:2f:f0:f6:64:de:1c:e2:9f:
         02:0e:cc:be:e4:97:2e:46:e5:cf:92:21:86:15:9c:df:88:c5:
         ec:fe:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----